CVE-2023-5172

What it actually does

A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash in the JIT compiler.

Why it matters to the business

Remote attackers could achieve arbitrary code execution on user systems running outdated Firefox versions, enabling data theft, malware deployment, or full host compromise without user interaction; high prevalence of the browser increases organizational exposure risk.

How an attack unfolds

An attacker serves a malicious webpage containing crafted JavaScript that triggers hashtable mutation during Ion Engine compilation, resulting in a use-after-free condition that corrupts memory and allows control-flow hijacking for code execution.

How to fix it

Upgrade Mozilla Firefox to version 118 or later to resolve the use-after-free in the Ion Engine.

How to confirm the fix worked

Confirm all instances report version 118 or higher; retest affected JavaScript workloads for stability and absence of exploitable crashes.

Typical attack path

1. Serve malicious webpage to target browser
2. Trigger Ion Engine JIT compilation via JavaScript
3. Mutate hashtable while holding live interior reference
4. Exploit resulting use-after-free for memory corruption
5. Achieve arbitrary code execution

How to detect it

Review browser crash logs for Ion Engine faults; inspect web proxy logs for unusual JavaScript patterns that may trigger hashtable operations; correlate with endpoint process anomalies.

What your security team should do

• Immediately deploy Firefox 118+ across all endpoints
• Enforce automatic browser updates via policy
• Monitor crash reports for Ion Engine anomalies
• Consider browser isolation controls for high-risk users